Security Engineer - Directory Services

About the role

Regular position, English language required, 1st shift (United States of America). Office‑centric, 5 days a week in one of the following locations: Atlanta, GA; Charlotte, NC; Raleigh, NC; Wilson, NC. Truist will not sponsor work visas or provide immigration‑related support for this role.

Responsibilities

• Designs and implements cybersecurity solutions that protect critical assets within the job area, contributing to the technical design and implementation approach while following established strategies and patterns.
• Performs threat modeling, security testing, and penetration testing for the platforms and services in scope, using structured analysis to identify and remediate significant vulnerabilities.
• Integrates and configures information security technologies in production environments, implementing and refining configuration patterns, automation, and handoff steps for assigned systems or services.
• Serves as a technical escalation point within the team for challenging security issues, investigating root causes and developing practical, reusable fixes that improve team workflows.
• Evaluates relevant security threats, tools, and design options, and provides input that helps shape technical plans, priorities, and goals for the job area.
• Collaborates closely with product and engineering teammates to apply security architecture guidance, secure by design practices, and governance controls in day‑to‑day development activities.
• Develops and maintains security baselines, guardrails, and control implementations for systems and applications in the area of responsibility, helping support regulatory and policy compliance.
• Leads the technical execution of incident response and basic forensic activities for services in scope, following playbooks, coordinating tasks with teammates, and suggesting improvements to procedures and tooling.
• Provides guidance, coaching, and informal training to other security engineers and technical teammates, sharing best practices through design and code reviews and knowledge sharing sessions.
• Leads significant security engineering workstreams or end‑to‑end processes within the job area, coordinating contributions from lower level technical professionals and reviewing outputs for quality and alignment.

Qualifications

Required:

• Bachelor’s degree or equivalent education, training, and work‑related experience.
• Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Preferred:

• Bachelor's degree and six years of experience or an equivalent combination of education and work experience.
• Banking or financial services experience.
• Certification: ServiceNow's Certified System Administrator (CSA) strongly preferred.
• Knowledge of and experience with the following technology systems and platforms:
• Microsoft Active Directory Domain Services
• Microsoft Active Directory Federation Services (ADFS)
• Microsoft Active Directory Certificate Services
• Microsoft DHCP
• Microsoft DNS
• Microsoft Distributed File System (DFS)
• Microsoft Key Management Services (KMS)
• Microsoft Identity Manager (MIM)
• Microsoft Remote Desktop Licensing (RDL)
• Quest product suite
• Hewlett Packard Enterprise physical servers
• Dell physical servers
• Windows Server operating systems (Windows Server 2025 through Windows Server 2012 R2)
• PowerShell scripting knowledge and ability to write customized scripts is preferred.
• Knowledge of networking and firewall rulesets is preferred.

Benefits

• Medical, dental, vision, life insurance, disability, accidental death and dismemberment coverage.
• Tax‑preferred savings accounts and a 401(k) plan.
• At least 10 days of vacation (prorated) and 10 sick days (prorated) during the first year, plus paid holidays.
• Depending on position/division, eligibility for Truist’s defined benefit pension plan, restricted stock units, and/or deferred compensation plan.

Schedule

Work shift: 1st shift (United States of